CWE-202

CVEs per yearBy the year they were published

1. 20202
2. 20213
3. 20224
4. 20233
5. 20248
6. 20258
7. 202621

Newest CVEs

• CVE-2026-118544

  Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259

  Drupal · Commerce Core

  Low3.7
• CVE-2026-110183

  PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking

  DALIBO · PostgreSQL Anonymizer

  Medium4.3
• CVE-2026-105615

  PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats

  DALIBO · PostgreSQL Anonymizer

  Low3.5
• CVE-2026-100420

  Information disclosure vulnerability in the cloud-client daemon of Deco BE63

  TP-Link Systems Inc. · Deco BE63 V2.0

  Medium6.8
• CVE-2026-79633

  Apache Answer: Missing Authorization Allows Mutations of Non-Public Content

  Apache Software Foundation · Apache Answer

  High8.1
• CVE-2026-79620

  Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata

  Apache Software Foundation · Apache Answer

  Medium4.3
• CVE-2026-79613

  Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles

  Apache Software Foundation · Apache Answer

  Medium5.3
• CVE-2026-106506

  Backstage: Improper input validation in scaffolder task list ordering

  backstage · backstage

  Medium5.3
• CVE-2026-103440

  pagetriagelist discloses suppressed reviewer usernames

  The Wikimedia Foundation · MediaWiki PageTriage extension

  Low1.2
• CVE-2026-40533

  An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…

  Synology · DiskStation Manager (DSM)

  Medium5.3

Vendors it comes up for most

1. Apache Software Foundation6
2. Cisco6
3. ABB2
4. DALIBO2
5. Dell2
6. Drupal2
7. @backstage1
8. Finrota1
9. FlowiseAI1
10. Genians1